data breach
In a concerning development, the UK-based footwear retailer Shoezone has fallen victim to a data breach, with sensitive information from approximately 200,000 customers being offered for sale on BreachForums, a notorious underground marketplace for stolen data. The sale of this compromised data was announced by IntelBroker, a prominent figure on the forum, on June 28, 2024. This breach has serious implications, exposing a range of customer information that includes names, addresses, email addresses, phone numbers, and partial payment information.
Company Overview
Shoezone is a well-established retailer specializing in affordable footwear in the UK. The company operates more than 500 stores across the country and has a growing online presence. Shoezone reported an annual revenue of $152 million, reflecting its significant market share in the footwear retail industry. The company's customer base is broad, ranging from budget-conscious shoppers to families seeking affordable shoe options.
Despite its strong market position, Shoezone has previously faced challenges in the digital space, particularly regarding data security. However, this recent breach represents one of the most severe incidents, bringing the company's cybersecurity practices under intense scrutiny.
Breach Details
The data breach was brought to light when IntelBroker, a well-known BreachForums administrator, posted the Shoezone.com database for sale. The post claimed that the database included the following compromised information:
- Customer Names
- Addresses
- Email Addresses
- Phone Numbers
- Last Four Digits of Credit Cards or Payment IDs
The stolen data spans a line count of 200,000 records, making it a substantial breach with potentially far-reaching consequences. The leak was reportedly verified by forum members, confirming the authenticity of the compromised data.
Threat Actor Profile
IntelBroker is a notorious figure in the cybercrime community, known for facilitating the sale of large-scale data breaches. Operating as an administrator on BreachForums, IntelBroker has been linked to several high-profile data breaches, leveraging their platform to distribute stolen information to buyers in the cybercriminal underworld. Their reputation in the hacking community suggests that the Shoezone data could be in high demand, given its comprehensive nature and the sensitive information it contains.